GitHub Actions, a popular CI/CD platform, introduces significant security challenges due to its integration with GitHub’s open ecosystem and its use of flexible workflow configurations. This paper presents Sher, a Py...GitHub Actions, a popular CI/CD platform, introduces significant security challenges due to its integration with GitHub’s open ecosystem and its use of flexible workflow configurations. This paper presents Sher, a Python-based tool that enhances the security of GitHub Actions by automating the detection and remediation of security issues in workflows. Self-Hosted Ephemeral Runner, or Sher, acts as a broker between GitHub’s APIs and a customizable, isolated environment, analyzing workflows through a static rules engine and automatically fixing identified issues. By providing a secure, ephemeral runner environment and a dynamic analysis tool, Sher addresses common misconfigurations and vulnerabilities, contributing to the resilience and integrity of DevSecOps practices within software development pipelines.展开更多
Using the first-principles plane-wave calculations within density functional theory, the perfect bi-layer and monolayer terminated WZ-CIS （100）/WZ-CdS （100） interfaces are investigated. After relaxation the atomic...Using the first-principles plane-wave calculations within density functional theory, the perfect bi-layer and monolayer terminated WZ-CIS （100）/WZ-CdS （100） interfaces are investigated. After relaxation the atomic positions and the bond lengths change slightly on the two interfaces. The WZ-CIS/WZ-CdS interfaces can exist stably, when the interface bonding energies are -0.481 J/m2 （bi-layer terminated interface） and -0.677 J/m2 （monolayer terminated interface）. Via analysis of the density of states, difference charge density and Bader charges, no interface state is found near the Fermi level. The stronger adhesion of the monolayer terminated interface is attributed to more electron transformations and orbital hybridizations, promoting stable interfacial bonds between atoms than those on a bi-layer terminated interface.展开更多
文摘GitHub Actions, a popular CI/CD platform, introduces significant security challenges due to its integration with GitHub’s open ecosystem and its use of flexible workflow configurations. This paper presents Sher, a Python-based tool that enhances the security of GitHub Actions by automating the detection and remediation of security issues in workflows. Self-Hosted Ephemeral Runner, or Sher, acts as a broker between GitHub’s APIs and a customizable, isolated environment, analyzing workflows through a static rules engine and automatically fixing identified issues. By providing a secure, ephemeral runner environment and a dynamic analysis tool, Sher addresses common misconfigurations and vulnerabilities, contributing to the resilience and integrity of DevSecOps practices within software development pipelines.
基金Project supported by the National Natural Science Foundation of China(Grant Nos.11164014 and 11364025)the Gansu Science and Technology Pillar Program,China(Grant No.1204GKCA057)
文摘Using the first-principles plane-wave calculations within density functional theory, the perfect bi-layer and monolayer terminated WZ-CIS （100）/WZ-CdS （100） interfaces are investigated. After relaxation the atomic positions and the bond lengths change slightly on the two interfaces. The WZ-CIS/WZ-CdS interfaces can exist stably, when the interface bonding energies are -0.481 J/m2 （bi-layer terminated interface） and -0.677 J/m2 （monolayer terminated interface）. Via analysis of the density of states, difference charge density and Bader charges, no interface state is found near the Fermi level. The stronger adhesion of the monolayer terminated interface is attributed to more electron transformations and orbital hybridizations, promoting stable interfacial bonds between atoms than those on a bi-layer terminated interface.
